Analysis
-
max time kernel
127s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19/04/2024, 10:11
Behavioral task
behavioral1
Sample
fa139f0a99bc0583e521505148ceb4f0_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa139f0a99bc0583e521505148ceb4f0_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fa139f0a99bc0583e521505148ceb4f0_JaffaCakes118.pdf
-
Size
86KB
-
MD5
fa139f0a99bc0583e521505148ceb4f0
-
SHA1
5fd3ec5c1f170fa2ff5ec336e85b2d432b840d40
-
SHA256
a55775f79ae16bd687e5ec92ba0716a484bc3ecaaaf7834669b247772fed0a0a
-
SHA512
84e41ed1703c7341be3f9b097a465c7206818c6ba058719bed13f3d063930e88865ee540a79329170fbf6a85c93b6b2252acff0ae09abcbcd78068a7694c6fa5
-
SSDEEP
1536:BUktA805aFVaJxmCttV+hPxXhG2SiKh/2W2Waq3CogxKuWspOR3qu3o:jtA83YhttVEpY2SnQWNCnKBRg
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 872 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 872 AcroRd32.exe 872 AcroRd32.exe 872 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fa139f0a99bc0583e521505148ceb4f0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:872
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59de01feaa26c4aa59f5f0b728c96354e
SHA10248fc6b518bf43fba76bed991b98b96bc88b875
SHA256ed0d414549fc7e778d15e0f50ead168955c9d25345d7eb89c0f15fa5a8edbf76
SHA512e4f0df35f48b304d9ff2387c4accdcd94edba0a3c7f5f5a66d1e2d64c189d6a3249540fb606f56daa95a69acae7c0e24317f7812a32b3428f9a9eb70e340ed87